VDB
CISA-2022-31684
CISA-2022-31684
PUBLISHED
CVSS 4.3 MEDIUM
Reported by vmware · Published October 19, 2022
Reactor Netty HTTP Server, in versions 1.0.11 - 1.0.23, may log request headers in some cases of invalid HTTP requests. The logged headers may reveal valid access tokens to those with access to server logs. This may affect only invalid HTTP requests where logging at WARN level is enabled.
Risk Scores
CVSS 3.1
4.3
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| n/a | Reactor Netty | Reactor Netty 1.0.11 to 1.0.23 |
| n/a | Reactor Netty | Reactor Netty 1.0.11 to 1.0.23, * |
Timeline
- Oct 19, 2022 CVE Published
- May 9, 2025 CVE Updated